Run untrusted installers in a disposable Windows desktop. Add a simple config to lock it down, then close it to erase ...
Windows Defender does a decent job of blocking malware but lacks many of the protection features found in suites like Trend Micro Internet Security.